以授權(quán)管理基礎(chǔ)設(shè)施和公鑰基礎(chǔ)設(shè)施為基礎(chǔ)，研究了單點(diǎn)訪問系統(tǒng)的實(shí)現(xiàn)模型。這兩種技術(shù)在單點(diǎn)訪問系統(tǒng)中實(shí)現(xiàn)身份認(rèn)證和訪問授權(quán)控制功能。通過中間件的方式來實(shí)現(xiàn)身份認(rèn)證和授權(quán)管理模型，并設(shè)計(jì)了相關(guān)的安全協(xié)議，對(duì)整個(gè)體系結(jié)構(gòu)的安全做了簡(jiǎn)單分析。該技術(shù)可使現(xiàn)有應(yīng)用做較少的修改就能實(shí)現(xiàn)一個(gè)安全、透明的單點(diǎn)訪問系統(tǒng)。

SAS(Single Access System) is studied based on the PKI (Public Key Infrastructure) model and PMI (Privilege Management Infrastructure) model. The PKI and PMI can provide functions of authentication and authority in the SAS. The way to implement the authority and authentication using middleware as well as related secure protocol is discussed. The security of the system’s architecture is also analyzed. These models enable a secure, transparent SAS with least modification to current applications.